search

sirupsen / logrus

Structured, pluggable logging for Go.
MIT License
24.76k stars 2.27k forks source link

update dependencies #1343

Closed dgsb closed 2 years ago

sio4 commented 2 years ago

Hi @dgsb

It seems like this PR reverted https://github.com/sirupsen/logrus/pull/1337 which is related to CVE. Is it an intentional change?

thaJeztah commented 2 years ago

https://github.com/sirupsen/logrus/pull/1337 looks odd, as it didn't update go.mod, so shouldn't have affected go.sum. Given that it's an indirect dependency, I don't see what the immediate responsibility is of logrus to update it though 🤔

sio4 commented 2 years ago

Agree. will file a PR for it soon.